Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B9ED192A8E411EF9BD7E78F762E951A.roa
File:                     0B9ED192A8E411EF9BD7E78F762E951A.roa (raw, json)
Hash identifier:          RcMLZRYlW62yUHHfhe7EdnhXSUMrcDBC8lAlbGXn94c=
Subject key identifier:   A0:05:79:00:2B:02:B7:A4:BC:CA:BA:94:33:8A:98:7F:F8:AE:EB:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0110B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B9ED192A8E411EF9BD7E78F762E951A.roa
Signing time:             Fri 22 Nov 2024 15:11:27 +0000
ROA not before:           Fri 22 Nov 2024 15:11:24 +0000
ROA not after:            Tue 03 Dec 2024 15:11:24 +0000
asID:                     62240
IP address blocks:        154.194.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Nov 2024 00:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69815 (0x110b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 22 15:11:24 2024 GMT
            Not After : Dec  3 15:11:24 2024 GMT
        Subject: CN=67409f1f-1c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:c8:df:96:24:47:e6:66:f7:31:19:32:0f:
                    aa:02:6d:29:43:9c:04:44:4d:d3:b5:2a:74:b5:ec:
                    02:9c:65:0b:28:f5:47:24:5b:32:2b:be:a0:0f:3a:
                    9c:91:89:0f:06:cc:a5:0f:61:27:93:42:72:6f:61:
                    1f:e4:93:b0:d1:d0:e9:a6:48:1d:02:26:2e:35:a7:
                    b8:66:e5:1c:0b:47:b2:76:50:2b:6d:5f:a3:f9:a8:
                    fe:47:51:a8:7b:5f:97:6f:ba:98:ff:62:bb:64:a1:
                    d5:c6:b4:ef:61:5a:2e:97:b3:17:e7:9d:df:11:0a:
                    ae:db:74:60:43:5d:c3:52:40:89:69:d4:c8:c4:37:
                    48:5b:4e:fe:a3:bd:38:91:f7:de:cb:26:12:26:74:
                    6e:ab:98:f6:a8:cc:52:9a:5a:02:b0:4c:02:97:44:
                    9f:1f:fc:aa:ef:d9:2b:74:51:78:4a:7f:55:6c:a1:
                    44:22:59:e7:31:85:0a:4a:65:ea:db:31:c5:66:e5:
                    c0:84:64:dc:03:62:5f:0d:aa:35:50:d5:5f:20:df:
                    a0:70:2a:d9:fa:72:fc:4f:80:fe:eb:8a:42:e2:bf:
                    bc:c1:49:ff:80:d2:ce:d8:12:39:40:fe:04:50:50:
                    ce:4b:f7:46:5a:f0:36:f8:56:cd:77:ed:48:51:68:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:05:79:00:2B:02:B7:A4:BC:CA:BA:94:33:8A:98:7F:F8:AE:EB:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B9ED192A8E411EF9BD7E78F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:03:a1:6f:4a:1e:be:86:b7:d6:78:4a:2c:69:4a:95:0c:d9:
         57:9d:aa:62:2d:8c:6f:c5:32:6a:12:90:63:22:bb:a2:8e:59:
         b4:3f:e4:c5:92:34:01:0b:7e:7b:3e:94:08:74:50:9a:79:44:
         89:be:79:60:a9:0a:74:18:7c:3d:b0:df:bb:a9:e8:fe:94:9d:
         0e:c6:e4:b2:15:00:25:52:de:5f:ae:a8:11:1d:a5:8c:ba:b7:
         6c:bb:ef:3d:3a:ff:68:9f:c6:4e:48:bf:df:30:58:45:15:57:
         77:84:e5:d8:e0:93:7a:fb:11:ad:98:9f:e8:42:20:ed:21:43:
         ed:79:fc:8f:47:cb:ce:1a:31:c7:90:37:87:bb:09:ef:a1:93:
         96:6e:c0:44:90:d2:ed:cd:99:01:e3:0d:91:db:47:44:2c:71:
         ca:63:79:02:0d:4c:eb:41:87:85:dd:22:6a:0a:81:1f:bc:70:
         d9:b5:93:85:7a:a3:12:73:d1:99:0c:a2:d8:ad:53:57:39:d6:
         51:c1:19:4f:91:7e:06:1b:f0:86:c4:9e:30:ba:16:5d:e5:80:
         b9:5e:6d:b3:0f:9a:53:59:e1:16:4a:c2:73:10:6b:55:35:16:
         71:b2:b1:7a:71:bb:ce:aa:4c:d9:7a:1d:b5:91:7f:26:57:3a:
         6c:50:fc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:55 2024 by rpki-client on console-ams.rpki-client.org